Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
15/07/2023, 12:08
General
-
Target
432489ed57e463exeexe_JC.exe
-
Size
374KB
-
MD5
432489ed57e463695444720200e19be0
-
SHA1
0a28588d2c02caff81cb14901fe14a4ec4136356
-
SHA256
ef35fb211e98f179c146ddecc936e460a6097ae77bfa8f8a89cbe835eab577dd
-
SHA512
ea450192d89ef4493622c5c7113c1b1b2bee2d674335860d64f5ea6e9a1dffeabed4cf1260eff13038017f46e023a802037554ae3c77966f6367c79ba7425903
-
SSDEEP
6144:tplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:tplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\432489ed57e463exeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\432489ed57e463exeexe_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Framework\skipto.exe"C:\Program Files\Framework\skipto.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
374KB
MD58d8d2c3e0478a3f4a39b0be41705912c
SHA13fc7d01fbe1e9c146c2bcde6db1e92b379955f27
SHA256165cdfed0eb126518e4880b99fbb7717667cd5810f924ee887d9baa428ce21c2
SHA512d84d0f95a79349004f76291215e3f04f379459e80cec1e06b26a2fd60e863368073b2986fbe9ece23e031c108303705e7bf9d8d7608325bdf475e89fdd2b7ebe
-
Filesize
374KB
MD58d8d2c3e0478a3f4a39b0be41705912c
SHA13fc7d01fbe1e9c146c2bcde6db1e92b379955f27
SHA256165cdfed0eb126518e4880b99fbb7717667cd5810f924ee887d9baa428ce21c2
SHA512d84d0f95a79349004f76291215e3f04f379459e80cec1e06b26a2fd60e863368073b2986fbe9ece23e031c108303705e7bf9d8d7608325bdf475e89fdd2b7ebe